Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(221)

Unified Diff: net/cert/cert_verify_proc.cc

Issue 949633002: Include both certificate chains in invalid cert reporting (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: add a comment to cert logger pb Created 5 years, 10 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: net/cert/cert_verify_proc.cc
diff --git a/net/cert/cert_verify_proc.cc b/net/cert/cert_verify_proc.cc
index d987e3dc04c079d67078a53df9e6a35e1161fb65..aef00cb4506ab25df821c4affc9ac5d51a9ca679 100644
--- a/net/cert/cert_verify_proc.cc
+++ b/net/cert/cert_verify_proc.cc
@@ -195,6 +195,10 @@ int CertVerifyProc::Verify(X509Certificate* cert,
CertVerifyResult* verify_result) {
verify_result->Reset();
verify_result->verified_cert = cert;
+ // |verified_cert| will later be set to the actual verified
+ // certificate chain if verification is successful. Keep around the
+ // chain as sent by the server in |unverified_server_cert|.
+ verify_result->unverified_server_cert = cert;
if (IsBlacklisted(cert)) {
verify_result->cert_status |= CERT_STATUS_REVOKED;

Powered by Google App Engine
This is Rietveld 408576698